You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@accumulo.apache.org by "ctubbsii (via GitHub)" <gi...@apache.org> on 2023/05/26 17:22:03 UTC
[GitHub] [accumulo] ctubbsii opened a new issue, #3433: Always authenticate users in the shell after startup and when switching users
ctubbsii opened a new issue, #3433:
URL: https://github.com/apache/accumulo/issues/3433
Issue #3427 reported a change in behavior of the shell, where the shell will not fail if started using invalid credentials. This is due to a change in AccumuloClient not performing the fast-failure that Connector used to (an intentional choice).
To restore expected behavior in the shell, the AccumuloClient should authenticate the current user every time a new AccumuloClient is constructed. This occurs when starting the shell initially, as well as when switching to another user.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@accumulo.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [accumulo] ctubbsii commented on issue #3433: Always authenticate users in the shell after startup and when switching users
Posted by "ctubbsii (via GitHub)" <gi...@apache.org>.
ctubbsii commented on issue #3433:
URL: https://github.com/apache/accumulo/issues/3433#issuecomment-1564723775
To authenticate the client, it should just be a simple matter of calling `client.securityOperations().authenticate()` immediately after it is constructed. However, this is made slightly complicated by the fact that the `AccumuloClient` can be constructed using the client config file. You can call `.whoami()` to get the username, but I'm not sure if there's an easy way to get the `AuthenticationToken` parameter that `authenticate(username, token)` requires.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@accumulo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [accumulo] ctubbsii commented on issue #3433: Always authenticate users in the shell after startup and when switching users
Posted by "ctubbsii (via GitHub)" <gi...@apache.org>.
ctubbsii commented on issue #3433:
URL: https://github.com/apache/accumulo/issues/3433#issuecomment-1564728297
A user also reported that when the shell is idle for too long, and it asks to re-authenticate, it doesn't matter what you enter, and it will still work. That is related to this issue. It should also authenticate the client object when that happens as well as startup and switching users.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@accumulo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [accumulo] dlmarion closed issue #3433: Always authenticate users in the shell after startup and when switching users
Posted by "dlmarion (via GitHub)" <gi...@apache.org>.
dlmarion closed issue #3433: Always authenticate users in the shell after startup and when switching users
URL: https://github.com/apache/accumulo/issues/3433
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@accumulo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [accumulo] ctubbsii commented on issue #3433: Always authenticate users in the shell after startup and when switching users
Posted by "ctubbsii (via GitHub)" <gi...@apache.org>.
ctubbsii commented on issue #3433:
URL: https://github.com/apache/accumulo/issues/3433#issuecomment-1564732180
There's a challenge that the credentials could be in the client config file, too. So, re-authenticating by asking the user to re-enter things, doesn't necessarily make sense... they might not know the credentials if it's sourced somewhere in the environment. So, we need to make sure that the re-authentication is working correctly for those cases, as well, and we're not pointlessly prompting.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@accumulo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org